PatchTheCVEe4jconnect vulnerabilities
Recent CVEs affecting e4jconnect products. 5 tracked.
e4jconnect has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-07-03. Highest priority: CVE-2024-39653 (score 47/100).
- CVE-2025-5322 HIGH 7.2 UPGRADE The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due t
- CVE-2025-46251 HIGH 7.1 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Cross Site Re
- CVE-2024-39653 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R.
- CVE-2024-1845 HIGH 8.8 UPGRADE The VikRentCar Car Rental Management System WordPress plugin before 1.3.2 does not have CSRF checks in some pl
- CVE-2024-11640 HIGH 8.8 UPGRADE The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery i
FAQ
How do I fix e4jconnect vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is e4jconnect being exploited right now?
None of the tracked e4jconnect CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which e4jconnect CVE should I patch first?
CVE-2024-39653 currently ranks highest (47/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R..